From the course: Learning the OWASP Top 10

Unlock the full course today

Join today to access over 24,600 courses taught by industry experts.

Insecure design

Insecure design

From the course: Learning the OWASP Top 10

Start my 1-month free trial Buy for my team

Insecure design

“

- [Instructor] The fourth item in the 2021 OWASP Top 10 is a new one, insecure design. OWASP calls it a new category focusing on risks related to design and architectural flaws. Personally, I think this is super exciting. Historically, most of the items in the OWASP Top 10 focus on code-level bug-type vulnerabilities, and this one actually addresses design-level flaw-type vulnerabilities. In some ways, building a web app is like building a house. You can think about bugs in the application as being similar to smaller problems that might affect your house, like a broken dishwasher seal or a light bulb that needs to be replaced. In the grand scheme of things, these are relatively minor problems with straightforward fixes. A design error, however, can be the root cause of a much larger problem. Imagine you're planning to build a house that's going to reside on the side of a hill. If you don't plan for a strong foundation…

Contents